The recommendation I see for this are:

The backup target should be accessible from only very specific accounts. Those accounts should be used for nothing other than the backup software itself or administration of the backup targets. i.e. no one should ever log in as them, etc.

So as long as the hack/virus isn't able to compromise your backup software or authentication mechanism, the backup target should be safe.

@Tim_G said in Fedora 26: connect to Windows File share:

@FATeknollogee said in Fedora 26: connect to Windows File share:

@Tim_G said in Fedora 26: connect to Windows File share:

Try this:

mount -t cifs -o username=administrator,password=urPassword,domain=domain.local //fileserver/share /mountLocation

No workie, says "Host is down"

Makes me think that your Linux box is trying to connect via an unsupported method.

For example, do you have SMB 1.0 turned off on your Windows file server... and your Linux box is trying to connect via SMB 1.0?

I tried calling out "SMB3.0", but, I get the error "For more deatils see mount (8)"

Simplistically speaking, when it doesn't work.
If it works, then it's a backup.
If it does not work, then it's a waste of time and disk space.

@NDC @Dashrender I would recommend this tool then
https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool

It works well for version 7 to 10 amd office downloads.

@bigbear said in VULTR rebooting my VM, 3 times in a week:

Anyway had this happen before?

Several times among various instances in Chicago. But, never at the same time. So I assumed staged updates or something. Never contacted them on it.

Just wanted to add @bj to this thread that I think a $100-ish Cloud Router from Mikrotik would blow most hardware away, including Ubiquiti, on pure performance. With the $50 and under models you are still getting 1 million PPS. The new cloud router series really has a crazy amount of power.

This still coming from a pure PPS (packets per second) point of view.

I think the cheapest cloud router has 12 to 16 cores That would only count for the core routers I am more familiar with (12 to 24 now) in the $500 range.

Very poor marketing in the states but very popular with western country WISPS.

@EddieJennings I don't know about the third, but if you start a hosting trial at freepbxhosting.com you get the first two free. Even if you then mode your install to Vultr it seems the licenses follow you for free.

Even three years ago, top three holiday sellers of ALL Amazon computer categories were Chromebooks...

http://www.pcworld.com/article/2863936/amazons-three-top-selling-computers-for-the-holidays-were-chromebooks.html

I'm planning on deploying 24 SFF machines for a school computer lab. The limited space they have is a big factor. Plan on mounting them on the back of the monitors. Plenty of horsepower for their workload.

Rebooted - profile created.

@JaredBusch It might not be a breach (as in someone getting the data) but a breach in the sense that personal information was left in the open through the Internet from a confidential database.

@scottalanmiller That was our local ISP here to a T; Literally 1 T1 and a 3Com Total Control so they could offer 56K speeds

@travisdh1

Nmap with ZanMap Gui is great.

@coliver said in Dumb question - 2 Post Rack Part Names:

Really should ensure a two post is anchored.

Yeah.. tell me about it. . .

@JaredBusch not necessarily abnormal but surely a mix of 3 independent repos.

@dbeato said in Supermicro motherboard: update BIOS...who need DOS!:

@scottalanmiller so then it's settled 🙂

Right, it is UEFI not EFI, and not an OS. Like I said.

@Mike-Davis said in Hardware sources:

@scottalanmiller said in Hardware sources:

So you let a salesman determine the best fit for your needs? If you aren't doing any research, how do you know he didn't just screw your customer by selling the thing that earns him the most margin (CDW is famous for how extremely they do this.) And what's your role here? If the customer wanted to engage predatory salesman directly, they could. No need for an IT person.

My role was picking the specs for the laptop. When he quotes me the laptop and case, I can take a look and spot check the price if I want. After he finds a case, I can take a look at it and see what kind of reviews it has.

How would you handle a request like that from a customer?

If I'm only asked to get specs and then pass it back to the customer and my job is done and they ask me to forward on to a salesguy and to step away, then sure, I'd do that. That's like asking your real estate agent how many square feet you need and then telling the agent to not be involved and let the seller's agent sell whatever they can get away with.

But if I'm in the IT role and responsible as the buyer's agent (IT role = buyer's agent for businesses) then it's my responsibility to know what is out there and do the research. Sure, there are cases where a single item is so trivially cheap and commodity that it's not worth the time to research - but normally in those cases you just go to Amazon, at least to see prices. Someone like CDW is a VAR and tack on a lot of cost (normally hidden in upsales) associated with using them. Like they don't give good discounts, sell based on kickbacks and behind the scenes promotions and such - CDW is the most well known in the industry for this as their "recommended" solutions change week to week based on the current vendor promotions. They don't recommend what is good for you, but what is good for them.

If customers don't want a buyer's representative, that's fine and up to them. But is it clear to them that they are being sold stuff by a sales person directly without any buyer's agent anywhere in the stream? It's like going to a real estate sale, telling the seller you'll buy anything they recommend with the adequate square footage. Yes, you'll get a house quickly, but it'll be the one for which the seller gets the highest commission and not one based around the buyer's needs.

Although this method of infection isn't new at all (I've played with it during some Webinar/Demo a year ago or something like that), using it with ransomware is the first I've seen!

Thanks for the info!